$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa File: cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa (raw, json) Hash identifier: RfIuPJV62385lQSdtPqc7/nFA37LL/Iex6ZysVm/xbo= Subject key identifier: DE:BD:B0:F4:89:52:70:5D:66:69:31:B6:3A:C9:B4:64:23:2C:CF:C3 Certificate issuer: /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Certificate serial: 010D0C9F4328584F497549F9CD5913B04CAAFB00 Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 209242 IP address blocks: 23.145.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:49:f9:cd:59:13:b0:4c:aa:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a63feeb8-46d6-4eda-992e-c629e82a83bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:75:5f:28:b9:05:aa:29:78:43:82:76:7f:da: e4:bb:ff:95:01:c8:ef:32:bf:90:29:f4:12:21:02: 7c:4b:31:22:11:9b:a1:8c:ff:14:b3:73:2a:86:b7: 15:ea:74:d9:10:b9:39:b3:a7:e6:6c:02:02:73:6d: 5e:be:26:6c:8d:c8:0d:fe:94:27:2d:50:4d:11:24: 95:61:14:da:29:70:7c:a6:fd:10:8a:0f:cb:0c:e7: f2:48:91:a8:23:14:b0:b3:19:6f:27:45:08:fe:fa: 6e:68:36:5b:fb:bd:03:a1:79:6f:3f:2b:f6:db:09: 4e:34:0f:cf:7e:9c:c2:d8:af:84:18:8e:cd:d8:28: 60:d5:43:c9:51:78:74:0c:43:61:2b:a8:72:c4:9a: f3:c3:f2:05:33:8c:07:ae:72:27:6f:21:68:65:ff: 63:26:3b:d0:fb:60:12:ed:93:1b:8d:0f:56:12:57: 56:a2:df:6e:a6:ce:6b:cf:ed:43:30:6b:ab:aa:1c: 57:af:a3:92:d1:01:af:28:eb:cc:e0:8b:2c:d9:1f: 1f:0f:ff:ed:31:90:0b:f3:f1:28:3d:ef:86:32:1b: a2:7d:c0:09:bb:c2:8f:8b:1d:f1:7e:fb:fc:30:b9: 9b:bb:a7:61:5f:38:7a:bb:b5:0c:c9:bc:a8:42:71: e8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BD:B0:F4:89:52:70:5D:66:69:31:B6:3A:C9:B4:64:23:2C:CF:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl X509v3 Authority Key Identifier: keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer sbgp-ipAddrBlock: critical IPv4: 23.145.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:38:0b:ad:e1:3b:dc:5b:63:15:f2:91:2a:b4:2c:93:f8:88: 3c:f3:dd:00:6a:54:cf:9e:0b:c1:03:46:b8:93:be:aa:9b:d1: ab:3f:07:94:23:18:1d:92:08:df:0e:48:27:7c:bd:3c:27:cc: ad:ef:5b:08:dd:43:9d:e7:05:f3:c1:40:ea:c5:33:d4:f5:12: ef:65:3d:80:7d:07:f2:be:8c:94:5a:e4:6b:55:65:b0:46:13: 2f:36:f0:e1:4d:3b:f1:14:69:00:85:c8:23:4b:65:2f:ec:f3: c4:2f:6b:bd:f6:31:83:bd:cd:aa:30:a4:01:ce:99:17:89:ca: 9c:9f:e7:34:de:09:fb:2e:45:00:55:cd:88:67:5c:a4:06:67: d0:9e:e1:a9:3c:6b:22:c7:95:52:6d:0e:92:35:c1:0d:15:32: 23:de:fc:96:16:78:fb:19:4c:b3:07:25:29:fe:14:28:3c:31: e7:29:8a:6c:68:b6:44:9e:a9:12:69:6b:0b:fd:2a:52:da:84: fa:99:d8:f1:24:78:94:73:1d:2c:96:18:6c:d8:50:3b:d5:9c: 08:bb:12:4e:81:44:86:49:86:30:b2:61:65:fd:f3:a3:c0:0d: c7:5a:c6:12:6e:ce:e0:44:4b:62:88:38:4f:d9:71:3a:62:19: 17:b4:f6:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdUn5zVkTsEyq+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI5YmYyZjQtYzgzMS00ZjFlLWEyZDUtZDdmYzQwNTM1 YzhmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTYzZmVlYjgtNDZkNi00ZWRhLTk5MmUtYzYyOWU4MmE4M2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHVfKLkFqil4Q4J2f9rku/+VAcjvMr+QKfQS IQJ8SzEiEZuhjP8Us3MqhrcV6nTZELk5s6fmbAICc21eviZsjcgN/pQnLVBNESSV YRTaKXB8pv0Qig/LDOfySJGoIxSwsxlvJ0UI/vpuaDZb+70DoXlvPyv22wlONA/P fpzC2K+EGI7N2Chg1UPJUXh0DENhK6hyxJrzw/IFM4wHrnInbyFoZf9jJjvQ+2AS 7ZMbjQ9WEldWot9ups5rz+1DMGurqhxXr6OS0QGvKOvM4Iss2R8fD//tMZAL8/Eo Pe+GMhuifcAJu8KPix3xfvv8MLmbu6dhXzh6u7UMybyoQnHo+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN69sPSJUnBdZmkxtjrJtGQjLM/DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjli ZjJmNC1jODMxLTRmMWUtYTJkNS1kN2ZjNDA1MzVjOGYvY2I0YjVlZTYtYmMwOC0z ZDYwLTkxOWEtODhmNzkyYzdiNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWI5YmYyZjQtYzgzMS00ZjFlLWEy ZDUtZDdmYzQwNTM1YzhmLzFiOWJmMmY0LWM4MzEtNGYxZS1hMmQ1LWQ3ZmM0MDUz NWM4Zi5jcmwwHwYDVR0jBBgwFoAUPMMWR4yxJu0PqWMpogFuhbqQmokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjliZjJmNC1jODMxLTRmMWUtYTJkNS1kN2Zj NDA1MzVjOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANM4C63hO9xbYxXykSq0LJP4iDzz3QBqVM+eC8EDRriTvqqb0as/B5Qj GB2SCN8OSCd8vTwnzK3vWwjdQ53nBfPBQOrFM9T1Eu9lPYB9B/K+jJRa5GtVZbBG Ey828OFNO/EUaQCFyCNLZS/s88Qva732MYO9zaowpAHOmReJypyf5zTeCfsuRQBV zYhnXKQGZ9Ce4ak8ayLHlVJtDpI1wQ0VMiPe/JYWePsZTLMHJSn+FCg8Mecpimxo tkSeqRJpawv9KlLahPqZ2PEkeJRzHSyWGGzYUDvVnAi7Ek6BRIZJhjCyYWX986PA DcdaxhJuzuBES2KIOE/ZcTpiGRe09oo= -----END CERTIFICATE-----Generated at Tue Oct 13 12:50:11 2026 by rpki-client